linux-stable.git/security/apparmor/include/file.h, branch linux-4.15.y Linux kernel stable tree apparmor: Refactor to remove bprm_secureexec hook 2017-08-01T19:03:06+00:00 Kees Cook keescook@chromium.org 2017-07-18T22:25:24+00:00 993b3ab0642e57da5de6bef11dd50db7e2fc3b7e The AppArmor bprm_secureexec hook can be merged with the bprm_set_creds hook since it's dealing with the same information, and all of the details are finalized during the first call to the bprm_set_creds hook via prepare_binprm() (subsequent calls due to binfmt_script, etc, are ignored via bprm->called_set_creds). Here, all the comments describe how secureexec is actually calculated during bprm_set_creds, so this actually does it, drops the bprm flag that was being used internally by AppArmor, and drops the bprm_secureexec hook. Signed-off-by: Kees Cook <keescook@chromium.org> Acked-by: John Johansen <john.johansen@canonical.com> Reviewed-by: James Morris <james.l.morris@oracle.com> Acked-by: Serge Hallyn <serge@hallyn.com> 
The AppArmor bprm_secureexec hook can be merged with the bprm_set_creds
hook since it's dealing with the same information, and all of the details
are finalized during the first call to the bprm_set_creds hook via
prepare_binprm() (subsequent calls due to binfmt_script, etc, are ignored
via bprm->called_set_creds).

Here, all the comments describe how secureexec is actually calculated
during bprm_set_creds, so this actually does it, drops the bprm flag that
was being used internally by AppArmor, and drops the bprm_secureexec hook.

Signed-off-by: Kees Cook <keescook@chromium.org>
Acked-by: John Johansen <john.johansen@canonical.com>
Reviewed-by: James Morris <james.l.morris@oracle.com>
Acked-by: Serge Hallyn <serge@hallyn.com>
apparmor: move path_link mediation to using labels 2017-06-11T00:11:44+00:00 John Johansen john.johansen@canonical.com 2017-06-09T23:06:21+00:00 8014370f1257619226b79cb6de8e28563fbbc070 Signed-off-by: John Johansen <john.johansen@canonical.com> 
Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: refactor path name lookup and permission checks around labels 2017-06-11T00:11:43+00:00 John Johansen john.johansen@canonical.com 2017-06-09T23:02:25+00:00 aebd873e8d3e34757c9295eef074d1be229f5893 Signed-off-by: John Johansen <john.johansen@canonical.com> 
Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: update aa_audit_file() to use labels 2017-06-11T00:11:43+00:00 John Johansen john.johansen@canonical.com 2017-06-09T22:48:20+00:00 98c3d182321d489d8bfaa596127020ec3027edb2 Signed-off-by: John Johansen <john.johansen@canonical.com> 
Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: move aa_file_perm() to use labels 2017-06-11T00:11:42+00:00 John Johansen john.johansen@canonical.com 2017-06-09T21:59:51+00:00 190a95189eb9e2233ed71a85cd6dd0c8efc9d392 Signed-off-by: John Johansen <john.johansen@canonical.com> 
Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: revalidate files during exec 2017-06-11T00:11:37+00:00 John Johansen john.johansen@canonical.com 2017-06-09T18:58:42+00:00 192ca6b55a866e838aee98d9cb6a0b5086467c03 Instead of running file revalidation lazily when read/write are called copy selinux and revalidate the file table on exec. This avoids extra mediation overhead in read/write and also prevents file handles being passed through to a grand child unchecked. Signed-off-by: John Johansen <john.johansen@canonical.com> 
Instead of running file revalidation lazily when read/write are called
copy selinux and revalidate the file table on exec. This avoids
extra mediation overhead in read/write and also prevents file handles
being passed through to a grand child unchecked.

Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: cleanup rename XXX_file_context() to XXX_file_ctx() 2017-06-11T00:11:37+00:00 John Johansen john.johansen@canonical.com 2017-06-09T18:43:45+00:00 2835a13bbdc09d330eafdf5e67eb407c90c01ab7 Signed-off-by: John Johansen <john.johansen@canonical.com> 
Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: switch from file_perms to aa_perms 2017-06-11T00:11:30+00:00 John Johansen john.johansen@canonical.com 2017-05-29T19:19:39+00:00 2d679f3cb0eaa6afa0dc97fe6ad3b797e1c1899a Signed-off-by: John Johansen <john.johansen@canonical.com> 
Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: rework perm mapping to a slightly broader set 2017-06-09T12:59:22+00:00 John Johansen john.johansen@canonical.com 2017-05-26T22:07:22+00:00 e53cfe6c7caa79ccdccce53e600dae522acb1c84 Signed-off-by: John Johansen <john.johansen@canonical.com> 
Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: move permissions into their own file to be more easily shared 2017-06-08T19:51:53+00:00 John Johansen john.johansen@canonical.com 2017-05-26T08:57:09+00:00 fc7e0b26b8d26e680bb2f252e9521385e0092e4c Signed-off-by: John Johansen <john.johansen@canonical.com> 
Signed-off-by: John Johansen <john.johansen@canonical.com>